$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/f85def6b-09ba-3066-8e65-6b86437e8e5d.roa File: f85def6b-09ba-3066-8e65-6b86437e8e5d.roa (raw, json) Hash identifier: tNZDR+QKeoI0cezskGTs7j4FvZYXEjej6fq+qtDi4/A= Subject key identifier: D4:E3:B7:B4:ED:4C:DC:5B:10:2F:E0:AE:EC:E2:77:28:74:B1:D4:9F Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F4328584BA23788ABFAD35826E8F75880 Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/f85def6b-09ba-3066-8e65-6b86437e8e5d.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 401714 IP address blocks: 2620:98:e00e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:88:ab:fa:d3:58:26:e8:f7:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=6922dac6-1270-4ef6-9f7f-253ee78eefa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fa:ec:d0:ae:40:09:8c:6c:08:94:fa:2b:32: cf:92:95:34:77:e6:c5:c3:ff:b9:63:9a:2a:9d:3d: 84:41:9d:f9:49:53:99:d7:d4:ca:00:97:d0:d4:b5: c8:39:c8:ae:2f:1f:d7:6d:7a:f4:22:b6:3e:a8:46: b7:f4:20:6a:a1:16:7b:b5:3b:c2:26:59:3d:19:15: 4e:8e:f9:db:5b:c2:ae:42:04:4b:a6:96:ed:4c:38: b5:37:cf:05:43:81:3e:01:54:85:47:3e:7d:71:e1: da:33:fa:89:a4:b4:a1:88:7c:87:0d:95:0c:76:55: f6:58:3b:9a:b2:4e:07:5e:56:83:a5:38:0f:bf:65: ba:62:a2:cc:6f:10:4d:73:f2:94:ad:60:15:35:7e: 85:f7:c8:dc:17:a7:05:1e:f5:64:d9:9c:dd:43:b1: 30:e9:ab:36:3f:7c:f7:18:2d:04:48:b4:ba:cb:d7: 10:3c:b6:69:92:55:8d:e1:84:62:f0:33:b2:fd:80: be:38:a8:e9:1e:0c:f5:d7:f0:fe:cb:9e:44:68:78: 8c:d4:77:32:a8:f7:78:cb:46:b0:df:e7:1d:eb:8a: de:d3:b8:9c:5c:91:33:48:30:90:30:1f:39:1e:10: d8:6b:bf:75:94:1f:ec:33:75:db:e4:ba:13:b6:77: 10:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E3:B7:B4:ED:4C:DC:5B:10:2F:E0:AE:EC:E2:77:28:74:B1:D4:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/f85def6b-09ba-3066-8e65-6b86437e8e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:e00e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:13:d9:c4:40:c0:df:b2:0b:ec:3d:d2:f3:9e:1d:30:49:3f: f1:4d:3a:e5:81:4f:c6:4d:a4:30:b6:65:df:39:dc:af:7b:bf: d1:f0:8a:c1:c0:05:a4:0f:0a:a4:5c:93:0c:a6:b4:43:e9:78: 3d:20:92:6c:f7:85:d2:f4:53:35:56:80:6a:29:95:64:48:fa: 77:70:ee:65:91:89:47:18:1d:89:59:cd:e1:d6:d6:48:fe:ac: 5b:4d:a8:52:6e:da:96:8c:ce:53:01:92:a6:87:01:1b:06:fd: 10:cc:15:29:f4:6d:c3:7e:fa:d8:08:5c:36:b9:a1:84:1b:b3: 30:93:6f:10:73:28:31:2c:9e:7f:6e:67:eb:6c:22:e2:6c:b4: 77:02:41:e5:f9:7b:a6:dd:2b:30:42:0c:1a:f2:57:4b:12:4f: ed:52:b3:02:88:6a:30:b6:a0:f2:da:d4:6a:ba:02:5f:4d:bf: 18:9a:91:a1:88:f7:cf:cc:c2:4e:02:3d:07:42:5e:31:d9:7e: 35:01:bd:11:7a:b2:43:15:dc:11:cb:33:17:95:3e:3b:57:92: 77:b0:2e:b8:d1:3e:14:fc:82:eb:03:d8:5a:c4:19:29:ef:45: ba:76:34:ce:c7:4d:f7:22:94:52:77:0f:6f:eb:4d:f8:af:ef: ed:ad:4b:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuiN4ir+tNYJuj3WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk NjkyMmRhYzYtMTI3MC00ZWY2LTlmN2YtMjUzZWU3OGVlZmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vrs0K5ACYxsCJT6KzLPkpU0d+bFw/+5Y5oq nT2EQZ35SVOZ19TKAJfQ1LXIOciuLx/XbXr0IrY+qEa39CBqoRZ7tTvCJlk9GRVO jvnbW8KuQgRLppbtTDi1N88FQ4E+AVSFRz59ceHaM/qJpLShiHyHDZUMdlX2WDua sk4HXlaDpTgPv2W6YqLMbxBNc/KUrWAVNX6F98jcF6cFHvVk2ZzdQ7Ew6as2P3z3 GC0ESLS6y9cQPLZpklWN4YRi8DOy/YC+OKjpHgz11/D+y55EaHiM1HcyqPd4y0aw 3+cd64re07icXJEzSDCQMB85HhDYa791lB/sM3Xb5LoTtncQkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNTjt7TtTNxbEC/gruzidyh0sdSfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvZjg1ZGVmNmItMDliYS0z MDY2LThlNjUtNmI4NjQzN2U4ZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmOAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABkT2cRAwN+yC+w90vOeHTBJP/FNOuWBT8ZNpDC2Zd853K97v9Hw isHABaQPCqRckwymtEPpeD0gkmz3hdL0UzVWgGoplWRI+ndw7mWRiUcYHYlZzeHW 1kj+rFtNqFJu2paMzlMBkqaHARsG/RDMFSn0bcN++tgIXDa5oYQbszCTbxBzKDEs nn9uZ+tsIuJstHcCQeX5e6bdKzBCDBryV0sST+1SswKIajC2oPLa1Gq6Al9Nvxia kaGI98/Mwk4CPQdCXjHZfjUBvRF6skMV3BHLMxeVPjtXknewLrjRPhT8gusD2FrE GSnvRbp2NM7HTfcilFJ3D2/rTfiv7+2tS90= -----END CERTIFICATE-----Generated at Wed Nov 5 14:30:15 2025 by rpki-client